NEAS[.]c4f3db7a5133dab7319990a9632695b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c4f3db7a5133dab7319990a9632695b0.exe
Size

885KB
MD5

c4f3db7a5133dab7319990a9632695b0
SHA1

e664a7de43c2a5ce42bc402e76fc8e502f4f53bb
SHA256

68b7d3ddca32bd50dac8c7238184e52662a01281eefa974a1e27763bfd7a003d
SHA512

9a7cbc4553c72475b2ae2e6112802af97c61eed43a1baa9082685a84dc23e9c27a95b2697691c33c582248a8d6d33dd1222d72b1d82409e7d127fe92345829b8
SSDEEP

12288:b91H6KvQ60vAKWx3P49TI6HQh10znFCL8mEGVhvn3UWEtMNBP:JB6I0mhPmTFiw7/IZn3et

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c4f3db7a5133dab7319990a9632695b0.exe

Files

NEAS.c4f3db7a5133dab7319990a9632695b0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 694KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ